roxas-tan Goto Github PK

aclpwn.py

Active Directory ACL exploitation with BloodHound

admodule

Microsoft signed ActiveDirectory PowerShell module

alpc-diaghub

Utilizing the ALPC Flaw in combiniation with Diagnostics Hub as found in Server 2016 and Windows 10.

barmie

Java RMI enumeration and attack tool.

bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

churrasco

Changes for Visual Studio 2013

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

crest-cpsa

Project to train for CREST CPSA exam. Includes 225 leaked questions

cve-2006-6184

simplified version of https://github.com/shauntdergrigorian/cve-2006-6184

cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

cve-2021-44228

This Log4j RCE exploit originated from https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce

debian-ssh

Debian OpenSSL Predictable PRNG (CVE-2008-0166)

dockerrootplease

Gives you root on the hostOS, if you're a member of the 'docker' group.

drupwn

Drupal enumeration & exploitation tool

egre55-windows-kernel-exploits

Windows Kernel Exploits

empire

Empire is a PowerShell and Python post-exploitation agent.

facefusion

Next generation face swapper and enhancer

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

idm-activation-script

An open source tool to activate and reset trial of Internet Download Manager

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

invoke-aclpwn

ipfuscator

IPFuscator - A tool to automatically generate alternative IP representations

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

lib_mysqludf_sys

A UDF library with functions to interact with the operating system. These functions allow you to interact with the execution environment in which MySQL runs.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

local-exploits

Various local exploits

lxd-alpine-builder

Build Alpine Linux images for LXD

microsoft-activation-scripts

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.